f5cec35f2ee20dcf8264cbe87a397c3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5cec35f2ee20dcf8264cbe87a397c3b_JaffaCakes118
Size

980KB
MD5

f5cec35f2ee20dcf8264cbe87a397c3b
SHA1

0ac4f0cde59c14256151251283c1eab92b11b145
SHA256

516a66673030f540d6e1ef0eeb757702d4d42fdafcdc2808a0d70a9d9ce32d5d
SHA512

5c94f4c141db7d04f5dc6aea74fea9a35970e36494ec509dbe772a5092fa6e04ddc2945bfd9ce7679b645330c775069ed781145f0eeb3662e24ab4850e2ffbac
SSDEEP

24576:6wpSE6d++r8RO0ZKIjYzSixouszkBJb9ALOj:6wp1c+w83rNwP3p9D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5cec35f2ee20dcf8264cbe87a397c3b_JaffaCakes118

Files

f5cec35f2ee20dcf8264cbe87a397c3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 953KB - Virtual size: 956KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ